PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

YesWeCaido: a new Caido plugin for tracking Bug Bounty Programs

yeswehack.com | blog | #bug-bounty | #caido | #tooling | #plugin | #web-proxy | #yeswecaido
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A walkthrough of YesWeCaido, a new Caido plugin that lets hunters browse and monitor YesWeHack Bug Bounty Programs and sync scopes in real time from inside the proxy tool.
Published
Collected

Related coverage

blog · caido.io
Shift Acquisition
Caido acquires the Shift plugin, an AI companion that crafts payloads, Match & Replace rules, and HTTPQL queries, making it free for paid users; creator Joseph Thacker joins as an AI advisor.
blog · caido.io
Caido is Now in Public Beta
Caido enters public beta after a year of private testing, shipping proxy tools like Sitemap, Intercept, Replay, and Automate, built on a Rust server and Vue web client.
blog · yeswehack.com
PimpMyCaido #1: Hunt client-side vulnerabilities with DOMLogger++
A hands-on guide to DOMLogger++, a browser extension and Caido plugin that hooks JavaScript sinks to surface DOM XSS, client-side path traversal, prototype pollution and sanitizer bypasses.
blog · yeswehack.com
How LLMs are changing Bug Bounty: An interview with Aituglo
Bug Bounty hunter Aituglo explains how he uses Claude Code, the Caido AI skill and Playwright in his workflow, which LLMs he trusts most, and how AI is intensifying competition among hunters.
blog · yeswehack.com
‘Being a developer before, I know where to find bugs’: Aituglo’s Bug Bounty story so far
Q&A with top-ranked hunter Aituglo: how a developer background helps him build tools and spot bugs, how he picks targets, and a password-reset flaw affecting every account at a medical firm.
blog · portswigger.net
Using Burp Extender
A worked example of Burp Extender based on Daniele Costa's plugin that extracts HTML comments from proxied responses, covering compiling the Java code, packaging a JAR and loading it into Burp.
Back